azure-kusto-data - npm Package Compare versions

Comparing version 0.3.2 to 0.3.3

package.json

 {
   "name": "azure-kusto-data",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Azure Data Explorer Query SDK",
@@ -5,0 +5,0 @@ "main": "index.js",

source/security.js

@@ -18,6 +18,6 @@
 
-        let authority = kcsb.authorityId || "common";
+        const authority = kcsb.authorityId || "common";
         let url;
 
-        // support node compatability
+        // support node compatibility
         try {
@@ -30,4 +30,9 @@ url = new URL(kcsb.dataSource);
 
+        const aadAuthorityUri = process.env.AadAuthorityUri;
+        const fullAuthorityUri = aadAuthorityUri ?
+            aadAuthorityUri + (aadAuthorityUri.endsWith("/") ? "" : "/") + authority
+            : `https://login.microsoftonline.com/${authority}`;
+
         this.kustoCluster = `${url.protocol}//${url.hostname}`;
-        this.adalContext = new AuthenticationContext(`https://login.microsoftonline.com/${authority}`);
+        this.adalContext = new AuthenticationContext(fullAuthorityUri);
         if (!!kcsb.aadUserId && !!kcsb.password) {
@@ -34,0 +39,0 @@ this.authMethod = AuthenticationMethod.username;

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

31588

0.76%

Lines of code

631

0.64%

Number of medium supply chain risk alerts

0

-100%

Worsened metrics

Number of low supply chain risk alerts

2

100%

No dependency changes